[ 
https://issues.apache.org/jira/browse/VYSPER-203?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12871634#action_12871634
 ] 

Niklas Gustavsson commented on VYSPER-203:
------------------------------------------

For the already added libs, the licenses have been checked:
Jetty: dual licensed ASL 2.0 & EPL
strophe.js: MIT
flXHR: MIT

We definitely need to add these to our NOTICE file, at least for our binary 
distributions. How about using the maven remote-resources to generate this file 
(the one in the root of the vysper-X.X-bin.[zip|tar.gz]? It's already used for 
the NOTICE (and LICENSE) files in all JAR files (as mandated by the Apache 
parent POM).

For our source distributions, as far as I understand NOTICE files, we do not 
need to include the license or attributions for binary dependencies. 

> Record new dependencies from BOSH extension
> -------------------------------------------
>
>                 Key: VYSPER-203
>                 URL: https://issues.apache.org/jira/browse/VYSPER-203
>             Project: VYSPER
>          Issue Type: Task
>    Affects Versions: 0.6
>            Reporter: Bernd Fondermann
>            Priority: Blocker
>
> BOSH introduces new dependencies. License must be checked and records be made 
> in our release notes.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to